windows-itpro-docs/mdop/agpm/create-a-new-controlled-gpo.md
Nicholas Brower 1ae3f0b230 Merged PR 4822: "msdate update (generated from most recent commit date)"
"msdate update (generated from most recent commit date)"
2017-12-05 22:36:05 +00:00

57 lines
2.0 KiB
Markdown
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

---
title: Create a New Controlled GPO
description: Create a New Controlled GPO
author: jamiejdt
ms.assetid: b43ce0f4-4519-4278-83c4-c7d5163ddd11
ms.pagetype: mdop
ms.mktglfcycl: manage
ms.sitesec: library
ms.prod: w10
ms.date: 06/16/2016
---
# Create a New Controlled GPO
New Group Policy objects (GPOs) created through the **Change Control** node will automatically be controlled, enabling you to manage them with Advanced Group Policy Management (AGPM).
A user account with the Approver or AGPM Administrator (Full Control) role or necessary permissions in Advanced Group Policy Management is required to complete this procedure. Review the details in "Additional considerations" in this topic.
**To create a new GPO with change control managed through AGPM**
1. In the **Group Policy Management Console** tree, click **Change Control** in the forest and domain in which you want to manage GPOs.
2. Right-click the **Change Control** node, and then click **New Controlled GPO**.
3. In the **New Controlled GPO** dialog box:
1. Type a name for the new GPO.
2. Optional: Type a comment for the new GPO to be displayed in the **History** for the GPO.
3. To immediately deploy the new GPO to the production environment, click **Create live**. To create the new GPO offline without immediately deploying it, click **Create offline**.
4. Select the GPO template to use as a starting point for the new GPO.
5. Click **OK**.
4. When the **Progress** window indicates that overall progress is complete, click **Close**. The new GPO is displayed in the list of GPOs on the **Controlled** tab.
### Additional considerations
- By default, you must be an Approver or an AGPM Administrator (Full Control) to perform this procedure. Specifically, you must have **List Contents** and **Create GPO** permissions for the domain.
### Additional references
- [Creating, Controlling, or Importing a GPO](creating-controlling-or-importing-a-gpo-approver.md)